Red Hat Security Advisory

RHSA-2012:1289

java-1.7.0-ibm security update

Released 2012-09-18 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3, java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3, java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3 +3
Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3, java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3, java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3 +1
Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3, java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3, java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3 +3
Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.7.0-ibm-1:1.7.0.2.0-1jpp.3.el6_3, java-1.7.0-ibm-demo-1:1.7.0.2.0-1jpp.3.el6_3, java-1.7.0-ibm-devel-1:1.7.0.2.0-1jpp.3.el6_3 +3

Fixes 13 records

TI-2012-03989 CVE-2012-4681 · GHSA-fw99-8m5g-58p8

Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java…

CRITICAL 100KEV

Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restri…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.98536 Published 2012-08-28 Partial fix CWE-284

TI-2012-01501 CVE-2012-1713 · GHSA-j7wm-898c-h674

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 52

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, 1.4.2_37 and earlier, and JavaFX 2.1 and earlier allow…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05916 Published 2012-06-16 Partial fix

TI-2012-01513 CVE-2012-1725 · GHSA-57mh-hh97-hpf2

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 51

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality,…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05555 Published 2012-06-16 Fixed

TI-2012-01510 CVE-2012-1722 · GHSA-88fp-2x5m-mw6j

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 51

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availabil…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05297 Published 2012-06-16 Fixed

TI-2012-01509 CVE-2012-1721 · GHSA-fc2w-696p-6mw5

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 51

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05297 Published 2012-06-16 Fixed

TI-2012-01504 CVE-2012-1716 · GHSA-vvhj-wvw3-qcrv

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 51

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05509 Published 2012-06-16 Fixed

TI-2012-01470 CVE-2012-1682 · GHSA-3cq6-v88g-8x73

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 51

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors relate…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05402 Published 2012-08-30 Partial fix

TI-2012-02688 CVE-2012-3136 · GHSA-5jvp-8v86-8h9w

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 50

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0395 Published 2012-08-30 Partial fix

TI-2012-00499 CVE-2012-0551 · GHSA-mc32-mvw8-hcj8

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7…

LOW 39

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish E…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.11388 Published 2012-05-03 Fixed

TI-2012-01514 CVE-2012-1726 · GHSA-h3pp-36x3-26c8

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 33

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02546 Published 2012-06-16 Fixed

TI-2012-01507 CVE-2012-1719 · GHSA-wjv6-r6x3-5g3g

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 29

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to af…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0335 Published 2012-06-16 Partial fix

TI-2012-00495 CVE-2012-0547 · GHSA-mpj2-6qj6-74jr

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 17

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and earlier, has no impact and remote attack vectors involving AWT and "a security-in-de…

CVSS 2.0LOW 0.0 Network No auth Interaction — EPSS 0.12471 Published 2012-08-30 Partial fix

TI-2012-01505 CVE-2012-1717 · GHSA-crx8-mq4w-pqc9

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 12

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00476 Published 2012-06-16 Partial fix